From Collaborative RCE Tool Library
PE Validator Script
| Tool name: | PE Validator Script |
|
||
|---|---|---|---|---|
| Author: | Daniel Pistelli | |||
| Website: | http://ntcore.com/ | |||
| Current version: | 1.0.0.1 | |||
| Last updated: | ||||
| Direct D/L link: | http://ntcore.com/Files/PEValidator.cff | |||
| License type: | Freeware/Open | |||
| Description: | A simple script for the CFF Explorer which detects some of the most common PE integrity problems. Some of the things checked by this script: -- check CRC32 (useful for drivers) -- check number of rva and sizes -- check image size -- check sections -- check that EP is valid -- check that EP is in code -- check that the EP section is executable -- check data directories RVAs -- check whether the API IsDebuggerPresent is imported |
|||
| Related URLs: | No related URLs have been submitted for this tool yet | |||
| Screenshot: |
|---|
 |
Feed containing all updates for this tool.
(please also edit it if you think it fits well in some additional category, since this can also be controlled)
You are welcome to add your own useful notes about this tool, for others to see!